Forum Discussion
William_Them_99
Nimbostratus
Apr 03, 2006Certificate Authentication Problem
In our environment, if you visit a virtual server hosting an application, the BIGIP will prompt for a client certificate and then authenticate that certificate against an LDAP database.
If t...
William_Them_99
Nimbostratus
Jul 06, 2006Ok, so last night we upgraded our development BIGIP box to v9.2.3 in order to be able to use the SSL::session invalidate function.
In the iRule, just before the redirect to the second virtual server, I pasted it in like so:
session delete ssl $id
SSL::session invalidate
HTTP::redirect "https://$login_vs/registration/auto_reg.aspx?location_request=[session lookup uie "location_request"]"Unfortunately we are still seeing the same behavior, that after the redirect to the second virtual server, if you manually type the URL to the first virtual server, you are no longer prompted for a client certificate. The way I understand the Wiki entry for the function, this should not be happening. It says:
SSL::session invalidate
Invalidates the current session. Specifically, this command drops the session from the session cache to prevent reuse of the session.
So - by calling this right before the redirect, shouldn't it delete all traces of the SSL handshakes with the first virtual server, including client certificates?
Thanks.
-Bill
Help guide the future of your DevCentral Community!
What tools do you use to collaborate? (1min - anonymous)Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects
